@wrelik/auth 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,12 @@
+# @wrelik/auth
+
+## 0.1.0
+
+### Minor Changes
+
+- ad849e3: Initial release of all wrelik-kit packages.
+
+### Patch Changes
+
+- Updated dependencies [ad849e3]
+  - @wrelik/errors@0.1.0

package/package.json

@@ -0,0 +1,28 @@
+{
+  "name": "@wrelik/auth",
+  "version": "0.1.0",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js",
+    "./next": "./dist/next.js"
+  },
+  "dependencies": {
+    "@clerk/backend": "^0.38.0",
+    "@wrelik/errors": "0.1.0"
+  },
+  "peerDependencies": {
+    "@clerk/nextjs": "^4.29.0"
+  },
+  "devDependencies": {
+    "tsup": "^8.0.1",
+    "vitest": "^1.2.2",
+    "@wrelik/eslint-config": "0.1.0",
+    "@wrelik/tsconfig": "0.1.0"
+  },
+  "scripts": {
+    "build": "tsup src/index.ts src/next.ts --format cjs,esm --dts --clean",
+    "lint": "eslint src/",
+    "test": "vitest run --passWithNoTests"
+  }
+}

package/src/index.test.ts

@@ -0,0 +1,28 @@
+import { describe, it, expect } from 'vitest';
+import { requireUser, fromClerkAuth } from './index';
+import { AuthRequiredError } from '@wrelik/errors';
+
+describe('@wrelik/auth', () => {
+  it('should throw AuthRequiredError if user is null', () => {
+    const session = { userId: null, tenantId: null, roles: [] };
+    expect(() => requireUser(session)).toThrow(AuthRequiredError);
+  });
+
+  it('should return userId if session is valid', () => {
+    const session = { userId: 'user_123', tenantId: null, roles: [] };
+    expect(requireUser(session)).toBe('user_123');
+  });
+
+  it('should correctly parse Clerk auth object', () => {
+    const clerkAuth = {
+      userId: 'user_123',
+      orgId: 'org_456',
+      sessionClaims: { publicMetadata: { roles: ['admin'] } },
+    } as any;
+
+    const session = fromClerkAuth(clerkAuth);
+    expect(session.userId).toBe('user_123');
+    expect(session.tenantId).toBe('org_456');
+    expect(session.roles).toContain('admin');
+  });
+});

package/src/index.ts

@@ -0,0 +1,50 @@
+import { AuthRequiredError, PermissionDeniedError, TenantRequiredError } from '@wrelik/errors';
+import type { SignedInAuthObject, SignedOutAuthObject } from '@clerk/backend';
+
+export interface WorkflowSession {
+  userId: string | null;
+  tenantId: string | null;
+  roles: string[];
+}
+
+export function fromClerkAuth(
+  auth: SignedInAuthObject | SignedOutAuthObject | null,
+): WorkflowSession {
+  if (!auth || !auth.userId) {
+    return { userId: null, tenantId: null, roles: [] };
+  }
+
+  const roles = ((auth.sessionClaims?.publicMetadata as any)?.roles as string[]) || [];
+
+  return {
+    userId: auth.userId,
+    tenantId: auth.orgId || null,
+    roles,
+  };
+}
+
+export function requireUser(session: WorkflowSession | null): string {
+  if (!session || !session.userId) {
+    throw new AuthRequiredError();
+  }
+  return session.userId;
+}
+
+export function requireTenant(session: WorkflowSession | null): string {
+  requireUser(session);
+  if (!session || !session.tenantId) {
+    throw new TenantRequiredError();
+  }
+  return session.tenantId;
+}
+
+export function hasRole(session: WorkflowSession | null, role: string): boolean {
+  if (!session || !session.userId) return false;
+  return session.roles.includes(role);
+}
+
+export function requireRole(session: WorkflowSession | null, role: string) {
+  if (!hasRole(session, role)) {
+    throw new PermissionDeniedError(`Role ${role} required`);
+  }
+}

package/src/next.ts

@@ -0,0 +1,7 @@
+import { auth } from '@clerk/nextjs';
+import { fromClerkAuth, type WorkflowSession } from './index';
+
+export function getSession(): WorkflowSession {
+  const clerkAuth = auth();
+  return fromClerkAuth(clerkAuth);
+}

package/tsconfig.json

@@ -0,0 +1,8 @@
+{
+  "extends": "@wrelik/tsconfig/next.json",
+  "compilerOptions": {
+    "incremental": false,
+    "outDir": "dist"
+  },
+  "include": ["src"]
+}